Warcraft 3 FrozenThrone custom game packet question

[leax]

hi

i m just wondering if anyone knows about the war3 custom game protocol, as in i m trying to stay idle after the game starts or better still parse some game data

heres what i logged right after game started

Code Select Expand


s->c      f7 0b ....  finish counting down
c->s f7 23 ....  this one should mean i have finish loading the map and waiting for everyone else to load
s->c f7 08 ....  think this one means other play have finish loading the map

stuff below i cant make any sense of, this is where game officially started

c->s f7 26 13 00 2c 26 2e eb 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a
s->c f7 0c 06 00 fa 00
s->c f7 0c 40 00 fa 00 be 14 0a 0b 00 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 05 0b 00 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 01 0b 00 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 02 0b 00 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a
c->s f7 27 09 00 a8 13 76 fa b4
s->c f7 0c 16 00 fa 00 64 fb 07 0b 00 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a f7 0c 06 00 fa 00
c->s f7 27 09 00 52 cd 82 0b 1e
s->c f7 0c 40 00 fa 00 0a da 04 0b 00 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 03 0b 00 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 08 0b 00 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 09 0b 00 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a
c->s f7 27 09 00 18 78 cc 1d 67
c->s f7 27 09 00 00 da 59 ac d9
s->c f7 0c 38 00 fa 00 3a 10 01 0d 00 62 7a 5a 00 00 bb 6b 00 00 01 00 00 00 03 0d 00 62 7a 5a 00 00 bb 6b 00 00 01 00 00 00 08 0d 00 62 7a 5a 00 00 bb 6b 00 00 01 00 00 00
c->s f7 27 09 00 00 69 d4 21 84
c->s f7 26 15 00 29 70 26 8f 62 7a 5a 00 00 bb 6b 00 00 01 00 00 00
s->c f7 0c 66 00 fa 00 fc 8c 06 0b 00 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 04 0d 00 62 7a 5a 00 00 bb 6b 00 00 01 00 00 00 05 0d 00 62 7a 5a 00 00 bb 6b 00 00 01 00 00 00 09 0d 00 62 7a 5a 00 00 bb 6b 00 00 01 00 00 00 0a 0d 00 62 7a 5a 00 00 bb 6b 00 00 01 00 00 00 02 0d 00 62 7a 5a 00 00 bb 6b 00 00 01 00 00 00
c->s f7 27 09 00 44 70 6d d3 30


so if anyone can shed some light on these packet and their meaning would be greatly appreciated
thanks!

[raylu]

Doesn't that look like "lalalala" to you?

Try the same thing for different game types; that should help you see which ones are specific to maps/types and which ones will always be sent.

[leax]

i finally fig out the "lalalalalala" 's are actually action thats documetned on the W3GS_action.txt and W3GS_format.txt in war3 replay parser sites, so does many other actions like right clicks, units selects and etc

though the hardest part is a constant flow of non action packets which are troubling, they look similar to ping packets for which the client repond with a pong but with 5 bytes of looks randomish data, maybe hash/encrypted or maybe an inbuilt random sequence. 
btw i tested with a observer client with host only, so client wont be sending any actions  only maintaing idle state

Code Select Expand


s->c      f7 0c 06 00 f9 00                        simiar to ping type of server packets
c->s      f7 27 09 00 5c 8c 68 e9 2b client alywas respond with 5 byte of weird stuff
s->c      f7 0c 06 00 fa 00
c->s      f7 27 09 00 5c 6e e9 5e b2
s->c      f7 0c 06 00 09 01
c->s      f7 27 09 00 5c 4a 5d ce 83
s->c      f7 0c 06 00 fa 00
c->s      f7 27 09 00 5c e7 d0 ca 0a
s->c      f7 0c 06 00 f9 00
c->s      f7 27 09 00 5c 2c c5 db 81
s->c      f7 0c 06 00 fa 00
c->s      f7 27 09 00 5c 89 4c 6c 0f
s->c      f7 0c 06 00 f9 00
c->s      f7 27 09 00 5c 56 38 7c 86
s->c      f7 0c 06 00 fa 00
c->s      f7 27 09 00 5c 73 83 e2 0d
s->c      f7 0c 06 00 fa 00
c->s      f7 27 09 00 5c 0d 4f 7b 9b
s->c      f7 0c 06 00 f9 00



does nayone know how to generate thses 5 bytes of client response

[raylu]

Well, seeing as how there are 9 bytes and the first 5 are the same, I hope you mean the last four. For all we know, they could be a random token